September 26, 2018 at 10:32 am #23279prakhash21Participant
Is there is an endpoint in openAM which I can use to retrieve the client secret from the OpenAM.
I’m using the OpenAM as the keymanager for my application and I have used the below endpoint with parameters to create an application in OpenAM
Now I need to retrieve back the client secret using client name as I don’t store it in my application side. What is the endpoint I need to use for it? I couldn’t find it in the OpenAM documentation.
If OpenAM is not allowing to retrieve the client secret with the Client Name, what is the best way to handle this use case?September 27, 2018 at 9:52 am #23287James PhillpottsModerator
There is no endpoint to retrieve the client secret – the only time AM will communicate this is at the point at creation – the client is responsible for storing that secret securely from then onwards.
JamesOctober 4, 2018 at 11:24 am #23339Andy CoryParticipant
Without being in possession of the client secret, how would the client authenticate itself to retrieve its secret if there were such an endpoint? I’m not sure I’ll see an RFE for this any time soon :-)
You must be logged in to reply to this topic.